$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: 5MxiMm4x7jLyJ9eaLapi4Ndh1bGj3o9p0SZbn2Lh1vo= Subject key identifier: 62:AF:F3:7C:6B:71:CE:1E:81:63:61:42:FE:8E:2C:6C:B0:8B:7C:95 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 616F9BF17905D494170404E0EC62EB7DF1D37364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 0104 Signing time: Wed 15 Apr 2026 16:41:16 +0000 Manifest this update: Wed 15 Apr 2026 16:36:16 +0000 Manifest next update: Sun 19 Apr 2026 04:40:16 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: Wc9bAvpvAa1HaIg0tvlqFEjoDNU0+0aanSzL1Q9HW8A=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6f:9b:f1:79:05:d4:94:17:04:04:e0:ec:62:eb:7d:f1:d3:73:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Apr 15 16:36:16 2026 GMT Not After : Apr 19 04:40:16 2026 GMT Subject: CN=62AFF37C6B71CE1E81636142FE8E2C6CB08B7C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:63:7f:87:17:12:2b:9f:16:64:65:27:48: 00:c7:77:f3:13:7f:50:2c:cb:68:3f:ac:d6:4a:2f: 34:98:76:bd:2b:3f:60:b8:78:10:d9:a6:4e:d6:b7: 4c:fd:77:ae:ce:71:7b:db:6b:62:d3:2b:55:1a:6d: 77:0e:82:18:d2:8c:f8:9c:5c:57:bc:df:74:2c:6f: 9f:f7:5f:8b:d2:2c:c0:b9:63:39:e2:d4:b1:9b:fa: c8:c3:8f:9e:30:f5:7b:d4:0f:48:fe:83:01:c7:8f: 92:ac:e6:c5:54:c9:7e:f4:75:8d:8d:cf:28:6e:5d: 72:99:66:9f:02:7d:b5:62:91:17:33:8a:6b:a6:13: f9:45:40:ee:ae:fb:b9:0d:df:98:a2:2f:81:12:1c: 60:43:6e:4a:58:39:f3:6a:1a:b7:7a:07:07:c7:20: 31:79:6f:0c:9f:6b:b5:ba:7a:df:f9:09:db:df:b7: 62:07:d8:0e:f8:7b:3d:00:d4:95:0a:9c:88:85:90: f6:3c:e3:f1:71:78:9c:fa:d0:3b:08:ee:50:11:c5: 0d:5d:54:4c:99:dd:48:2c:1b:29:2f:b1:e3:55:0f: 22:4d:64:91:e9:ae:eb:0c:ab:72:71:0b:4d:2c:98: 8c:78:6d:6f:1e:de:49:d3:8a:5a:c1:42:b7:33:b3: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AF:F3:7C:6B:71:CE:1E:81:63:61:42:FE:8E:2C:6C:B0:8B:7C:95 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8e:ea:93:d0:42:20:02:ed:01:07:27:bf:1a:a7:51:ab:f1: cb:9c:eb:64:df:41:c6:a0:d6:51:09:b8:79:31:68:7c:77:c4: fd:37:0b:3b:de:93:5d:6e:17:f3:10:2d:b5:35:a3:ba:49:86: 0d:35:48:49:68:b0:8c:fb:40:03:5f:c6:f2:2d:d9:d9:88:e5: b8:85:b8:18:ae:e6:97:2f:a3:78:4b:a2:89:59:10:59:05:7a: 57:62:54:dd:f1:4f:be:11:f8:bc:98:02:0f:89:9e:14:02:75: 1a:62:b5:41:aa:57:ec:02:01:fb:e2:3d:e4:50:a6:4f:7d:f4: 8d:11:10:a7:e0:0b:fd:8b:4f:2e:76:f7:46:2d:af:dc:c1:93: 83:65:31:ff:82:20:2f:d9:1c:9c:6f:6c:28:e4:96:e0:f6:44: 58:ac:1e:c6:26:02:40:fe:69:7b:e0:99:48:62:bf:8c:78:8a: 2b:0a:8d:27:8e:93:1e:ca:1f:f0:76:df:a6:81:7a:29:59:39: 92:83:7c:7e:35:b4:0e:11:7b:0c:34:ac:5d:ec:4e:0f:cd:74: 6a:be:b1:c6:f4:fb:86:f0:be:4c:a7:45:c8:5e:26:7f:32:d6: 85:c0:c4:57:96:8e:53:93:08:dc:a8:0e:f1:fd:dc:41:33:3b: f4:65:24:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYW+b8XkF1JQXBATg7GLrffHTc2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNjA0MTUxNjM2MTZaFw0yNjA0MTkwNDQwMTZaMDMxMTAvBgNV BAMTKDYyQUZGMzdDNkI3MUNFMUU4MTYzNjE0MkZFOEUyQzZDQjA4QjdDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gWN/hxcSK58WZGUnSADHd/MT f1Asy2g/rNZKLzSYdr0rP2C4eBDZpk7Wt0z9d67OcXvba2LTK1UabXcOghjSjPic XFe833Qsb5/3X4vSLMC5Yzni1LGb+sjDj54w9XvUD0j+gwHHj5Ks5sVUyX70dY2N zyhuXXKZZp8CfbVikRczimumE/lFQO6u+7kN35iiL4ESHGBDbkpYOfNqGrd6BwfH IDF5bwyfa7W6et/5Cdvft2IH2A74ez0A1JUKnIiFkPY84/FxeJz60DsI7lARxQ1d VEyZ3UgsGykvseNVDyJNZJHprusMq3JxC00smIx4bW8e3knTilrBQrczs6gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYq/zfGtxzh6BY2FC/o4sbLCLfJUwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6O6pPQQiAC7QEHJ78ap1Gr8cuc62TfQcag 1lEJuHkxaHx3xP03Czvek11uF/MQLbU1o7pJhg01SElosIz7QANfxvIt2dmI5biF uBiu5pcvo3hLoolZEFkFeldiVN3xT74R+LyYAg+JnhQCdRpitUGqV+wCAfviPeRQ pk999I0REKfgC/2LTy5290Ytr9zBk4NlMf+CIC/ZHJxvbCjkluD2RFisHsYmAkD+ aXvgmUhiv4x4iisKjSeOkx7KH/B236aBeilZOZKDfH41tA4Reww0rF3sTg/NdGq+ scb0+4bwvkynRcheJn8y1oXAxFeWjlOTCNyoDvH93EEzO/RlJBI= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:05 2026 by rpki-client